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DETAILED ACTION 

Claim Rejections - 35 USC § 102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 35 1(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

Claims 1, 3-5, 7, 9, and 12, are rejected under 35 U.S.C. 102(e) as being anticipated by 
Shmueli et al. (U.S. Patent Application Publication No. 2002/0162009). 

As per claim 1, Shmueli shows in figure 1 a secure flash memory device 10 for a 
computer 12. The secure flash memory device 10 comprises a connection port 24 connecting the 
flash memory device 10 to the computer 12 and a microcontroller (not shown, but taught by 
Shmueli in Tf26 as control circuitry that is used to assist in interaction with the host), which is 
electrically connected to the connection port 24 in order to communicate with the host (1(26). 
Shmueli also shows in figure 1 a flash memory 1 8 that is electrically connected to the 
microcontroller since the -microcontroller organizes data 22 fl[26). Shmueli teaches in ^[36 and 
1J44 a pre-installed security program (authentication program) for limiting access to the flash 
memory 1 8 that is run by the computer 12. Paragraph 44 teaches that the security program is 
executed by the computer 12 when the computer 12 requests to access the memory via the 
[control logic] through the connection port 24. Finally, ffif 36-37 teach that when the security 
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program is executed a pass code stored in the computer is compared with a predetermined code . 
stored in the flash memory device. The Examiner is interpreting the pass code stored in the 
computer to be buffered by the computer when the user enters the pass code, thus the pass code 
is stored in the computer 12. The pass code in the flash memory device 10 is stored in a form 
understandable by the security program since the security program compares the pass code 
stored in the flash memory device 10 with the pass code stored in the computer 12 in order to 
prevent access of data on the device 10 between the device and the computer 12 via the 
connection port 24 (1J44). If the pass codes do match, the microcontroller allows data to be 
exchanged between the connection port 24 to the computer 12 and the flash memory device 10 
(refer to 25 and 44). 

As per claim 3, Shmueli teaches that there can be a plurality of partitions of the flash 
memory 18 and the security program (authorization program) determines how information can 
be exchanged between the connection port 24 and each partition. One way, would be to 
associate a pass code only with a high security level (|42). 

As per claim 4, Shmueli teaches that the predetermined code is capable of being set by a 
user in \19. 

As per claim 5, Shmueli teaches in fl44 that the predetermined code is encrypted. 
As per claim 7, Shmueli teaches in 1J44 that the predetermined code is stored in the flash 
memory. 

As per claim 9, Shmueli teaches in 1J36 that the security program (authentication 
program) is stored in the flash memory 18 as a keylet. 

As per claim 12, Shmueli teaches in 1J92 that the connection port is a USB port. 
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Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1 1 and 13 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Shmueli et al. (U.S. Patent Application Publication No. 2002/0162009). 

As per claim 11, Shmueli does not specifically state that the interface used to input the 
password is a GUI but it would have been obvious to one having ordinary skill in the art at the 
time the invention was made to have used a GUI in order to have prompted a user to input a 
password so it would have been easier for the user to have seen when to input a password or 
when changing the predetermined code fl|79). 

As per claim 13, Shmueli fails to teach the connection port 24 of figure 1 as being an 
integrated drive electronics (IDE) port. It would have been obvious to one having ordinary skill 
in the art at the time the invention was made to have used an IDE connection in the secure 
memory device of Shmueli as IDE protocols are known to provide superior transfer rates to mass 
storage devices than that of the USB protocol, thereby allowing faster accesses with a larger 
bandwidth connection. 
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Claim 14 is rejected under 35 U.S.C. 103(a) as being unpatentable over Shmueli et al. 
(U.S. Patent Application Publication No. 2002/0162009) in view of Brandt et al. (U.S. Patent 
No. 5,892,905). 

As per claim 14, Shmueli does not teach specifically using HTML as the programming 
language to code the security program, although Shmueli does teach that some of the keylets are 
coded in a markup language (UH48-49). However, Shmueli does teach in ^32 that keylets are 
often written in any software technology facilitating ready executing on a computer 12, of which 
HTML is such a type as known in the art. Brandt teaches in the abstract the HTML is a well- 
known language that can be used by any computer on the market today. Brandt further states 
that HTML is well-controlled and standardized language where new application features can be 
added as they are developed. Therefore, it would have been obvious to one having ordinary skill 
in the art at the time the invention was made to have written the security program of Shmueli in 
HTML, in accordance to the teachings of Brandt in order to have been able to have had the 
software of the secure firmware device run on a wide variety of computers on the market. 
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Allowable Subject Matter 

Claims 6,8, and 10, are objected to as being dependent upon a rejected base claim, but 
would be allowable over the prior art of record if rewritten in independent form including all of 
the limitations of the base claim and any intervening claims. 

Claims 15-19 are allowable over the prior art of record 

The following is a statement of reasons for the indication of allowable subject matter: 

As per claim 6, Shmueli does not specifically teach the predetermined code of the flash 
memory device being stored within the microcontroller (control circuitry of Shmueli). 

As per claims 8 and 19, Shmueli does not specifically teach the security program being 
stored within the microcontroller (control circuitry of Shmueli). 

As per claims 10 and 15, Shmueli does not specifically teach storing a portion of the 
security program code within the microcontroller (control circuitry of Shmueli). 

As per claims 16-18, the claims are allowable over the prior art of record as being 
dependent upon allowable claims. 

Response to Arguments 

Applicant arguments, see pages 6-9, of amendment filed 7 July 2004, with respect to the 
rejections of claims 1-5,7,8,10,12, and 15-17 under § 102(a) have been folly considered and are 
persuasive. Therefore, the rejection has been withdrawn. However, upon further consideration, 
a new ground of rejection is made in view of Shmueli et al. (U.S. Patent Application Publication 
2002/0162009). Shmueli teaches a flash memory device capable of executing a security program 
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stored on the flash memory device by a computer to which the device is connected, thereby 
allowing access to the flash memory device upon authentication by a user. 

Response to Amendments 
As per the Applicant's amendment filed 7 July 2004: 

(i) The objections to the specification have been respectfully withdrawn hereto; 

(ii) The rejections of claims 1-5,7,8,10,12, and 15-17 under 35 U.S.C. 102(e) as being 
anticipated by Shmueli et al. (U.S. Patent Application Publication No. 2002/0162009) has been 
respectfully withdrawn hereto. 

(iii) The rejection of claim 6 under 35 U.S.C. 103(a) as being unpatentable over Cheng 
(U.S. Patent Application Publication No. 2002/0010827) in view of Kobayashi et al. (U.S. Patent 
Application Publication No. 2004/0042363) has been respectfully withdrawn hereto; 

(iv) The rejection of claim 9 under 35 U.S.C. 103(a) as being unpatentable over Cheng 
(U.S. Patent Application Publication No. 2002/0010827) in view of Bean et al. (U.S. Patent 
Application Publication No. 2003/0074577) has been respectfully withdrawn hereto; 

(v) The rejections of claims 1 1 and 13 under 35 U.S.C. 103(a) as being unpatentable over 
Cheng (U.S. Patent Application Publication No. 2002/0010827) has been respectfully 
withdrawn; 

(vi) The rejections of claims 14,18, and 19 under 35 U.S.C. 103(a) as being unpatentable 
over Cheng (U.S. Patent Application Publication No. 2002/0010827) in view of Brandt et al. 
(U.S. Patent No. 5,892,905) has been respectfully been withdrawn; 
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(vii) Claims 1, 3-5, 7, 9, and 12, stand rejected under 35 U.S.C. 102(e) as being 
anticipated by Shmueli et al. (U.S. Patent Application Publication No. 2002/0162009); 

(viii) Claims 1 1 and 13 stand rejected under 35 U.S.C. 103(a) as being unpatentable over 
Shmueli et al. (U.S. Patent Application Publication No. 2002/0162009); 

(ix) Claim 14 stands rejected under 35 U.S.C. 103(a) as being unpatentable over Shmueli 
et al. (U.S. Patent Application Publication No. 2002/0162009) in view of Brandt et al. (U.S. 
Patent No. 5,892,905). 

(x) Claims 6,8,10, and 15 - 19 are allowable over the prior art of record; 

(xi) Claim 2 has been canceled by the Applicant. 

Conclusion 

KeySafe™ (Using Multiligual KeySafe*™) teaches on page 12 that the KeySafe™ 
security program is stored on a portion of the flash memory of a secure flash memory device. 

Disgo (www.mydisgo.com/press/press_releases/article_3.php) shows a date (11 
December 2001) for the KeySafe™ reference. 

Gnanasabapathy et al. (U.S. Patent Application Publication 2003/0023871) teaches a 
microcontroller (12, figure 1) which executes a security program stored in the flash memory 22. 

Ziv et al. (U.S. Patent Application Publication 2004/0103288) teaches a security program 
for securing private information with a password on a flash memory device. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shane M Thomas whose telephone number is (703) 605-0725. 
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Please note: the aforementioned number will change to (571) 272-4188 effective October 15, 
2004. The examiner can normally be reached M-F 8:30 - 5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Matt M Kim can be reached on (703) 305-3821, which will change to (571) 272- 
4182 effective October 15, 2004. The fax phone number for the organization where this 
application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 




